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A bstract 

The objective of the advanced detection, Iso- 
lation, and accommodation (ADIA) program Is to 
Improve the overall demonstrated reliability of 
digital electronic control systems for turbine 
engines. For this purpose, algorithms have been 
developed which detect, Isolate, and accommodate 
sensor failures using analytical redundancy. In 
this paper preliminary results of a full scale 
engine demonstration of the ADIA algorithm are pre- 
sented. Minimum detectable levels of sensor fail- 
ures for an F100 turbofan engine control system are 
determined and compared to those obtained during a 
previous evaluation of this algorithm using a real- 
time hybrid computer simulation of the engine. 

Introduction 

The objective of the advanced detection. Iso- 
lation, and accommodation (ADIA) program Is to 
Improve the overall demonstrated reliability of 
digital electronic control systems for turbine 
engines by detecting, Isolating, and accommodating 
sensor failures using analytical redundancy methods. 
This paper discusses the preliminary results of a 
full scale engine demonstration of an analytical 
redundancy based algorithm developed as part of the 
ADIA program. 

Over the past 35 years hydromechanical Imple- 
mentations of turbine engine control systems have 
matured Into highly reliable units. However, there 
Is a trend towards Increased engine complexity. 

This Increased complexity Is required to meet ever 
Increasing engine performance requirements. Conse- 
quently, the engine control has become Increasingly 
complex. Because of this complexity trend and the 
revolution In digital electronics, the control has 
evolved from a hydromechanical to a full authority 
digital electronic (FADEC) Implementation. These 
FADEC type controls have to demonstrate the same or 
Improved levels of reliability as their hydro- 
mechanical predecessors. 

In an effort to improve the overall reliability 
of the digital electronic control system, various 
redundancy management techniques have been applied 
to both the total control system and to Individual 
components. Studies 1 have shown that the least 
reliable of the control system components are the 
engine sensors. In fact some type of sensor redun- 
dancy will be required to achieve adequate control 
system reliability. One Important type Is analyti- 
cal redundancy (AR). 2 Analytical redundancy uses 
a model to generate redundant Information that can 
be compared to measured Information to detect fail- 
ures. Analytical redundancy based systems can have 
cost and weight savings over other approaches such 
as hardware redundancy. 

Considerable progress has been made In the 
application of analytical redundancy to Improve 
turbine engine control system reliability. The 


accomplishments, surveyed In Ref. 2, point to sev- 
eral technology needs. These Include: (1) the 

ability to detect small (soft) failures, (2) real- 
time Implementations of algorithms capable of 
detecting soft failures, (3) a comparison of fail- 
ure detection algorithm complexity versus perform- 
ance, (4) a full scale demonstration of a soft 
failure detection capability, and (5) an evaluation 
of the pseudollnearl zed modeling approach. The 
ADIA program conducted at the NASA Lewis Research 
Center addresses all of these technology needs. 

The ADIA program Is organized Into four phases: 
development. Implementation, evaluation, and demon- 
stration. References 3 to 7 describe the develop- 
ment, Implementation, and evaluation phases. In 
the development phase 3 * 4 the ADIA algorithm was 
designed using advanced filtering and detection 
methodologies. In the Implementation phase 5 this 
advanced algorithm was Implemented In microproces- 
sor based hardware. A parallel computer architec- 
ture (three processors) was used to allow the 
algorithm to execute In a frame time consistent 
with stable, real-time operation. In the evalu- 
ation phase 5 * 7 an evaluation of algorithm per- 
formance was obtained using a real-time engine 
simulation running on a hybrid computer. The 
objectives of the evaluation were to (1) validate 
the algorithm for sensor failure detection, Isola- 
tion, and accommodation (DIA) effectiveness, 

(2) document algorithm performance, (3) validate 
the algorithm's real-time Implementation, and 
(4) establish a data base for the demonstration 
phase of the ADIA program. This report describes 
the demonstration of the ADIA algorithm on a full 
scale FI 00 engine In the NASA Lewis altitude test 
facility. 

This paper begins with a description of the 
test bed system used In the demonstration of the 
ADIA algorithm. Next, a description of the ADIA 
algorithm Is given followed by a description of the 
Implementation hardware. The results of the demon- 
stration are then presented. Finally, conclusions 
and recommendations for further work are given. 

Test Bed System Description 

The algorithm was demonstrated using a test 
bed system consisting of (1) an engine system, 

(2) a multivariable control, and (3) the ADIA 
algorithm. The algorithm will be described In the 
next section. The test bed system Is shown In 
Fig. 1. 

Engine System 

The engine system consists of an F100 turbofan 
engine and Its associated control actuators and 
sensors. The FT 00 turbofan engine Is a high- 
performance, low-bypass ratio, twin-spool turbofan 
engine. The test engine has four controlled 
Inputs, five sensed outputs, and four sensed envi- 
ronmental variables. 
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These variables are defined as follows. 


Controlled engine Inputs, U com and U m 


WF 

Main combustor fuel flow 

AF 

Exhaust nozzle area 

CIVV 

Fan Inlet variable vanes 

RCVV 

Rear compressor variable vanes 


Sensed engine outputs, Z m 

N1 

Fan speed 

N2 

Compressor speed 

PT4 

Burner pressure 

PT6 

Exhaust nozzle pressure 

FTIT 

Fan turbine Inlet temperature 


Sensed environmental variables, E m 

PO Ambient (static) pressure 

PT2 Fan Inlet (total) pressure 

TT2 Fan Inlet temperature 

TT25 Compressor Inlet temperature 

Strictly speaking, TT25 Is a sensed engine output 
variable. However, since TT25 Is used only as a 
scheduling variable In the control (like TT2), It 
Is considered an environmental variable and Is not 
covered by the ADIA logic. 

Multivariable Control System 

The multivariable control (MVC) system shown 
In Fig. 1 Is essentially a model following, propor- 
tlonal-plus-lntegral control. The MVC control 8 
was previously demonstrated In an altitude test of 
an FI 00 engine. 9 The components of the control 
are the reference point schedules, the transition 
schedules, the proportional control logic, the 
Integral control logic, and the engine protection 
logic. The reference point schedules generate a 
desired engine operating point In response to the 
pilot's thrust command (PLA) and sensed engine 
environment. The transition logic generates rate 
limited command trajectories for smooth transition 
between steady-state operating points. The propor- 
tional and Integral control logic minimize transi- 
ent and steady-state deviations from the commanded 
trajectories. The engine protection logic limits 
the size of the commanded engine Inputs. The nor- 
mal control mode In the MVC logic used fuel flow to 
set engine fan speed and nozzle area to set nozzle 
pressure (engine pressure ratio). However, at 
those conditions where limiting Is required, fuel 
flow can be used to limit the maximum FTIT, the 
maximum PT4 , or the minimum PT4 . 


outputs signals. All sensor failures (l.e., both 
hard and soft) were Injected In this fashion. 

Algorithm Description 

The AOIA algorithm detects, Isolates, and 
accommodates sensor failures In an F100 turbofan 
engine control system. The algorithm Incorporates 
advanced filtering and detection logic and Is 
general enough to be applied to different engines 
or other types of control systems. The ADIA 
algorithm (Fig. 1) consists of three elements: 

(1) hard sensor failure detection and Isolation 
logic, (2) soft sensor failure detection and Isola- 
tion logic, and (3) an accommodation filter. Hard 
failures are defined as out-of-range or large bias 
errors that occur Instantaneously In the sensed 
values. Soft failures are defined as small bias 
errors or drift errors that Increase relatively 
slowly with time. 

In the normal or unfalled mode of operation, 
the accommodation filter uses the full set of engine 
measurements to generate a set of optimal estimates 
of the measurements. These estimates (Z) are used 
by the control law. When a sensor failure occurs, 
the detection logic determines that a failure has 
occurred. The Isolation logic then determines which 
sensor Is faulty. This structural Information Is 
passed to the accommodation filter. The accommoda- 
tion filter removes the faulty measurement from 
further consideration. The filter, however, con- 
tinues to generate the full set of optimal estimates 
for the control. Thus the control does not have to 
restructure for any sensor failure. The ADIA 
algorithm Inputs as shown In Fig. 1 are the sensed 
engine output variables, Z m , and the sensed engine 
Input variables, U m (t). The outputs of the algo- 
rithm, the estimates, z(t), of the measured engine 
outputs, Z m ( t) , are used as Input to the propor- 
tional part of the control. During normal mode 
operation, engine measurements are used In the 
Integral control to ensure accurate steady-state 
operation. When a sensor failure Is accommodated, 
the measurement In the Integral control Is replaced 
with the corresponding accommodation filter esti- 
mate by reconfiguring the Interface switch matrix. 

Accommodation Filter 

The accommodation filter Incorporates an engine 
model along with a Kalman gain update to generate 
estlmates^of the engine states X and the engine 
outputs Z as follows. 

X » F( X - X b ) + G(U m - U b ) + K Y 


Demonstration Hardware 


Z = H( X - X b ) + D(U m - U b ) 


The ADIA algorithm was demonstrated using an 
F100 engine In the NASA Lewis altitude test facil- 
ity. This facility can duplicate a wide range of 
flight conditions (altitude and Mach number). 
Reference 10 describes the microprocessor-based 
control system computer which Implemented the MVC 
and ADIA algorithms. Including accompanying Inter- 
face and monitoring hardware Interactive data 
acquisition software. A separate personal-computer- 
based system for simulating sensor failures 11 was 
used. This failure simulator was located between 
the engine sensors and the control system computer. 
It simulated sensor failures by adding an appropri- 
ate bias voltage to the selected engine sensor 


V = Zm - Z 

Here the subscript b represents the base point 
(steady-state engine operating point) and X Is 
the 4 by 1 model state vector, U m the 4 by 1 
sensed control vector, and Z m Is the 5 by 1 
sensed output vector. The matrix K Is the Kalman 
gain matrix and y Is the residual vector. The 
F, G, H, and D matrices are the appropriately 
dimensioned system matrices. Their Individual 
matrix elements along with those of K are cor- 
rected by the engine Inlet conditions^ E m and 
scheduled an nonlinear functions of Z. These 
functions are given In Ref. 2. 
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Reconfiguration of the accommodation filter, 
after the detection and Isolation of a sensor fail- 
ure, Is accomplished by forcing the appropriate 
residual element to zero. This effectively substi- 
tutes the estimate for the feedback (sensed) vari- 
able. For example If a compressor speed sensor 
failure (N2) has been Isolated, the effect of recon- 
figuration is to force y? = 0. This Is equivalent 
to setting sensed N2 equal to the estimate of 
N2 generated by the filter. The residuals gen- 
erated by the accommodation filter are used In the 
hard failure detection logic. 

Hard Failure Detection and Isolation Logic 

The hard sensor failure detection and Isola- 
tion logic Is straightforward. To accomplish hard 
failure detection and Isolation the absolute value 
of each component of the residual vector Is com- 
pared to Its own threshold. If the residual abso- 
lute value Is greater than the threshold, then a 
failure Is detected and Isolated for the sensor 
corresponding to the residual element. Threshold 
sizes are Initially determined from the standard 
deviation of the noise on the sensors. These 
standard deviation magnitudes are then Increased to 
account for modeling errors In the accommodation 
filter. The hard detection threshold values are 
twice the magnitude of these adjusted standard 
deviations. These magnitudes are summarized In 
Table 1. 

Soft Failure Detection and Isolation Logic 

The soft failure detection logic consists of 
multiple-hypothesis-based testing. Each hypothesis 
Is Implemented using a Kalman filter. The soft 
failure detectlon/lsolatlon logic structure Is 
shown In Fig. 2. A total of six hypothesis filters 
are shown, one for normal mode operation and five 
for the failure modes (one for each engine output 
sensor). The structure for each hypothesis filter 
Is Identical to the accommodation filter. However, 
each hypothesis filter uses a different set of 
measurements. For example the first hypothesis 
filter (H-|) uses all of the sensed engine outputs 
except the first, N1 . The second uses all of the 
sensed outputs except the second, N2, and so on. 
Thus, each hypothesis filter generates a unique 
residual vector, y^ . From this residual each 
hypothesis filter generates a statistic or likeli- 
hood based upon a weighted sum of squared residuals 
( WSSR) . Assuming Gaussian sensor noise, each sam- 
ple of y} has a certain likelihood or probability. 

-WSSR 

L 1 = P 1 ( ) = k e 
where k Is a constant and 
wssR-j = 

with 

l = dlag(cr^) 

The <?] are the standard deviations defined In 
Table 1. These standard deviation values scale the 
residuals to unitless quantities that can be summed 
to form WSSR. The WSSR statistic Is smoothed to 
remove gross noise effects by a first order lag 


with a time constant of 0.1 sec. Mathematically, 
when the log of the ratio of likelihoods Is taken, 
then 



The log of the ratio of each hypothesis likelihood 
to the normal mode likelihood Is calculated. If 
the maximum log likelihood ratio exceeds the thres- 
hold, then a failure Is detected and Isolated and 
accommodation occurs. If a sensor failure has 
occurred In N1 for example, all of the hypothesis 
filters except H-j will be corrupted by the faulty 
Information. Thus each of the corresponding like- 
lihoods will be small except for H-) . Thus, LR-j 
will be the maximum and it will be compared to the 
threshold to detect the failure. 

Initially, the soft failure detectlon/lsolatlon 
threshold was determined by standard statistical 
analysis of the residuals to set the confidence 
level of false alarms and missed detections. Next, 
the threshold was modified to account for modeling 
error. It was soon apparent from Initial evaluation 
studies that transient modeling error was dominant 
In determining the fixed threshold levels. It was 
also clear that this threshold was too large for 
desirable steady-state operation. Thus, an adaptive 
threshold was Incorporated. The adaptive threshold 
Is triggered by an Internal control system variable 
which Is Indicative of transient operation. When 
the engine experiences a transient, the isolation 
threshold Is expanded. The exact modification was 
found by experimentation on a simulation to minimize 
false alarms during transients. The adaptive thres- 
hold expansion logic enabled the steady-state detec- 
tion threshold to be reduced to 80 percent of Its 
original value. Additional details of the algorithm 
can be found In Ref. 6. 

Failure Accommodation 

For accommodation two separate steps are taken. 
First, all seven of the filters (the accommodation 
filter and the six hypothesis filters) are recon- 
figured to account for the detected failure mode. 
Second, If a soft failure was detected, the states 
and estimates of all seven filters are updated to 
the correct values of the hypothesis filter which 
corresponds to the failed sensor. 

APIA Algorithm Implementation 

To conduct the test-bed demonstration an 
Implementation of the ADIA algorithm was Integrated 
with an existing microcomputer Implementation of 
the F100 multivariable control (MVC) algorithm. 

The resulting controls microcomputer system was 
based on the Intel 80186 microprocessor architec- 
ture. To satisfy the control update Interval 
requirement of 40 msec to guarantee engine stabil- 
ity, three processors (CPU's) operating In parallel 
are used. Data Is transferred between CPU's through 
dual-ported memory. Synchronization between CPU's 
Is achieved through Interrupts. 

The existing MVC Implementation was programmed 
In fixed point assembly language and was used with- 
out change on CPU No. 1. The ADIA algorithm exe- 
cutes on CPU's No. 2 and No. 3 and was programmed 
using floating point arithmetic and FORTRAN. The 
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total memory requirement for the three CPU's Is 
57 Kbytes for the algorithm and 15 Kbytes for the 
executive. In all cases the code and constants 
were about 65 percent and the data or variables 
about 35 percent of the total memory required. 
Additional details of the Implementation can be 
found In Ref. 6. 

Demonstration Results 

This section describes preliminary results 
obtained In demonstrating the ADIA algorithm using 
the F100 engine. The test procedure and the results 
of the demonstration are discussed. The objective 
of the engine test was to demonstrate the operation 
and performance of the ADIA algorithm and Its 
Implementation over a substantial portion of the 
flight envelope of the F100 engine. 

Procedure 

The test matrix, shown In Fig. 3, summarizes 
the tests used to demonstrate the algorithm. The 
different engine operating conditions (altitude/Mach 
number) used for the demonstration are listed across 
the top of the matrix and the different tests con- 
ducted at these points along the side. Currently, 
only results for the 10 000 ft altitude, 0.6 Mach 
number (10 K/0.6) operating condition have been 
obtained. Engine power (PLA) settings were selected 
which represent maximum nonafterburning (Intermedi- 
ate) thrust (PLA = 80) and -50 percent of Interme- 
diate thrust (PLA = 50 and 70). The rationale used 
to select the test matrix operating points was to 
duplicate as many of the points used In the F100 
Multivariable Control Program 7 as possible, to 
avoid high fan Inlet pressures, and to reasonably 
span the envelope. This rationale Is a compromise 
among taking advantage of previous results for com- 
parison, limited risk engine operation, and full 
envelope validation. 

The type of tests used In the demonstration 
were selected to completely define detection per- 
formance for three common failure modes. Also, 
tests were conducted to determine engine control 
performance with and without engine sensor fail- 
ures. The tests, are summarized In Table 2. 

Resul 4 ; 

Three types of demonstration results will now 
be presented. The first shows the accuracy of the 
accommodation filter with no sensor failures, the 
second shows the detection performance of the ADIA 
algorithm. Finally, accommodation performance Is 
demonstrated . 

Estimator accuracy . The single most Important 
element In determining ADIA algorithm performance 
Is the accuracy of the engine output estimates used 
In the algorithm. These estimates are determined 
using the accommodation filter, which Incorporates 
a simplified engine model. A sample of the accuracy 
of the filter Is presented In Fig. 4 which shows an 
Idle-to-lntermedl ate-power PLA pulse transient gen- 
erated at the 10 K/0.6 condition. The variables 
shown, fan speed (Nl) and exhaust nozzle pressure 
( PT6) , demonstrate the excellent estimate accuracy 
achieved. These results are typical of the other 
estimates . 


Detection/accommodation performance . Two types 
of sensor failure were considered, hard and soft. 
Hard failures, because of their size, are easily 
detected. Thus, hard failure detection performance, 
although Important to system reliability, was exam- 
ined at only one operating condition (10 K/0.6). 

The ADIA algorithm exhibited excellent hard detec- 
tion performance at this condition. There were no 
false alarms or missed detections of any hard 
failures. Hard failures were Injected In each of 
the engine sensor output signals. Successful detec- 
tion and accommodation of the failure was accom- 
plished In each case. In addition no false alarms 
In the hard detection logic were encountered during 
the subsequent soft failure demonstration. 

Soft sensor failures, although small In magni- 
tude, If undetected may result In degraded or unsafe 
engine operation. Soft failures are more difficult 
to detect then hard failures. Therefore the demon- 
stration concentrated on soft failure performance. 
Two soft failure modes were studied, bias and drift. 
The criteria used to evaluate detection. Isolation, 
and accommodation performance were: (1) minimum 

detectable bias values and drift rates, (2) elapsed 
time between sensor failure and detection, 

(3) steady-state performance degradation after 
failure accommodation, and (4) transient response 
of the engine to the filter and control reconfigu- 
ration of failure accommodation. The minimum 
detectable levels of bias and drift rate obtained 
for the 10 K/0.6 condition are summarized In 
Table 3. The minimum detectable drift rates were 
determined by adjusting the drift magnitude such 
that a failure was detected -5 sec after failure 
Inception. 

The demonstration results are compared to the 
levels obtained during the real-time hybrid evalu- 
ation phase of the program. The comparison at 
PLA = 80° shows an excellent agreement for both 
bias and drift magnitudes. At PLA = 50° however, 
the demonstration results are slightly higher than 
the hybrid evaluation results. In this case the 
detection threshold has been expanded by a factor 
of two to study the degradation In performance this 
would cause. In general, the detection levels are 
still good except for Nl . The algorithm was unable 
to detect a failure smaller than the hard detection 
level of 600 rpm. 

Additionally, detection performance for sequen- 
tial failures was studied. Six different sequences 
of soft failures were Injected Into the test bed 
system. One example of a failure sequence was to 
fall Nl , then 4 sec later fall N2, then PT4 , and 
then PT6. In each case the algorithm successfully 
detected and accommodated each sensor failure In 
the correct order. These tests demonstrate the 
ability of the algorithm to continue to successfully 
perform even after some sensors have failed. 

Finally, a simultaneous soft failure of PT4 
and PT6 (both failed at the same Instant of time) 
was Injected Into the engine system. The algo- 
rithm, although not specifically designed for this 
extremely low probability event, successfully 
detected and accommodated this failure scenario. 

Accommodation performance . Two experiments were 
used to demonstrate the successful accommodation of 
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sensor failures. The first experiment consisted of 
Injecting, detecting, and accommodating a single 
sensor failure and then commanding a PLA pulse 
transient. Engine performance with this accommo- 
dated failed sensor Is compared to normal mode 
engine performance. Typical results are shown for 
the PT6 single failure case for fan speed 
(Fig. 5(a)) and exhaust nozzle pressure (Fig. 5(b)). 
Performance was good since the desired or request 
values were closely maintained. A slight drop In 
actual PT6 can be seen but this Is acceptable. In 
all other cases the accommodated single failure 
transient performance was good. 

The second experiment demonstrated the excel- 
lent accuracy of the engine model. In this experi- 
ment, first all the engine sensors were failed and 
accommodated. Then, a PLA pulse transient was 
generated from Idle to about 75 percent of full 
power. Results for N1 and PT6 are shown In Fig. 6. 
Again excellent performance was demonstrated. Lit- 
tle or no overshoot was observed and engine steady- 
state performance was good. This demonstrates the 
capability of safe, predictable engine operation 
without any engine feedback Information over a 
broad power range. 

Conclusions 

Based on results of engine tests obtained so 
far, several preliminary conclusions have been 
reached. First, It can be concluded that the ADIA 
failure detection algorithm works quite well. Sen- 
sor failure detection and accommodation were demon- 
strated at two power conditions. The minimum 
detectable failure magnitudes represent excellent 
algorithm performance and compare favorably to val- 
ues predicted by simulation. Accommodation per- 
formance was excellent. Transient engine operation 
over the full power range with single sensors failed 
and accommodated was successfully demonstrated. 

Open loop engine operation (all sensors failed and 
accommodated) over 75 percent of the power range 
was also demonstrated. Second, the algorithm Is 
Implementable In a realistic environment and In an 
update Interval consistent with stable engine oper- 
ation. Off-the-shelf microprocessor based hardware 
and straightforward programming procedures. Includ- 
ing FORTRAN and floating point arithmetic, were 
used. Parallel processing was also used and shown 
to be an effective approach to achieving a real-time 
Implementation using off-the-shelf (cost effective) 
computer resources. Finally, It Is concluded that 
the demonstrated high performance detection. Isola- 
tion, and accommodation capabilities of the ADIA 
algorithm justifies further demonstration throughout 
the flight envelope. Pending the anticipated suc- 
cessful outcome of the additional demonstration 
testing, a flight test evaluation may be justified 
as future work. 
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TABLE 1. - HARD DETECTION 
THRESHOLD MAGNITUDES 



Detection 

threshold 


600 rpm 
800 rpm 
60 psi 
10 psi 
500 R 



TABLE 2. - TEST DEFINITIONS 


Name 

Description 

Sensor failures 


Hard 

Large magnitude (hard) bias failure 
Is Induced. 

Soft 

Small magnitude (soft) bias failure 
Is Induced. 

Drift 

Small magnitude (soft) drift failure 
Is Induced. 

SSF 

A sequence of successive sensor 
failures Is Induced. 

PLA transients 


Pulse 

Idle to Intermediate to Idle 
transient PLA excursions. The 
Intermediate power level Is 
maintained for 10 sec. 

Single 

Pulse test with a single sensor 
failure accommodated before 
Initiating the transient. 

Open 

Same as the Pulse test except that 
the minimum power level Is raised 
slightly and the maximum power 
level Is decreased slightly and 
the engine Is controlled without 
using any sensed engine output 
Information in the control, 

1 .e. , all sensors failed. 


TABLE 3. - MINIMUM DETECTABLE BIAS AND DRIFT FAILURE MAGNITUDES 


[Altitude = 10 K, Mach = 0.6. ] 


PLA 

Sensor 

Minimum detectable bias failure 


Minimum detectable drift 

failure 

Hybrid 

simulation 

Engine 

demonstration 



Hybrid 

simulation 

Engine 

demonstration 


50 

N1 

300.0 


rpm 


100.0 

200.0 

rpm/ sec 


N2 

300.0 

350 

rpm 


100.0 

100.0 

rpm/sec 


PT4 

12.5 

30 

psi 


2.5 

4.0 

psl/sec 


PT6 

3.0 

5 

psi 


0.8 

0.9 

psl/sec 


FTIT 

50.0 

200 

deg 


70.0 

100.0 

deg/sec 

80 

Ml 

-350.0 

-350 

rpm 


-125.0 

-125.0 

rpm/sec 


N2 

-350.0 

-350 

rpm 


-125.0 

-125.0 

rpm/sec 


PT4 

-12.5 

-14 

psi 


-1.3 

-2.5 

psl/sec 


PT6 

-3.0 

-3 

psi 


-0.6 

-0.6 

psl/sec 


FTIT 

-150.0 

-200 

deg 


-70.0 

-100.0 

deg/sec 
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! FIGURE 1. - F100 TESTBED SYSTEM. 
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(B) EXHAUST NOZZLE PRESSURE. 

FIGURE 5. - RESPONSE TO A PLA PULSE INPUT WITH A PT6 FAIL- 
URE ACCOMMODATED. 
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